DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8a2dd51feedeef88ef106989532384bf_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8a2dd51feedeef88ef106989532384bf_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8a2dd51feedeef88ef106989532384bf_JaffaCakes118
Size
104KB
MD5
8a2dd51feedeef88ef106989532384bf
SHA1
e348336cc3dec827f9b7f3300267e8a2469a7cbb
SHA256
a390b17619836265cc56f79286fa4487fe2bd61af26c80c86392b970a91bbff6
SHA512
4de7657ceab261001ce9e62e4e33f5ba91f68c9fe4f95abeb0748408fb6dee98e98c6d8460e4e1ad76be39ce6f25bd639918ff1ca8d7d890d4093d96cc58b674
SSDEEP
1536:97UgDP1LgQ3dwo6HQbCTbbWBOuR5Wus/31N7QqtErUYPAfEMFTV:Tb1gmaJHKCTGWFNEgSM5
Checks for missing Authenticode signature.
resource |
---|
8a2dd51feedeef88ef106989532384bf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ